Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Apache Spark Command Injection VulnerabilityPatch nowKEVEPSS 93.24%Jul 18, 2022
- Unknownautomationdirect d0-06dd1_firmware Cleartext Transmission of Sensitive InformationPatch nowKEVEPSS 0.73%Jul 14, 2022
- High7.8Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation VulnerabilityPatch nowKEVEPSS 18.77%Jul 12, 2022
- Critical9.8varktech pricing_deals_for_woocommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 8.01%Jul 11, 2022
- High7.8An issue was discovered in the Linux kernel through 5.18.9.Patch nowKEVEPSS 5.45%Jul 4, 2022
- High8.8WebRTC Heap Buffer Overflow VulnerabilityPatch nowKEVEPSS 70.83%Jul 1, 2022
- UnknownOxilab Shortcode Addons Plugin Arbitrary Option Update VulnerabilityPatch nowKEVEPSS 3.35%Jun 30, 2022
- UnknownBiplob Adhikari's Accordions plugin Unauthenticated WordPress Options Change VulnerabilityPatch nowKEVEPSS 3.35%Jun 30, 2022
- Unknownyikesinc custom_product_tabs_for_woocommerce Improper AuthenticationPatch nowKEVEPSS 1.45%Jun 28, 2022
- Unknowncommscope ruckus_vriot Use of Hard-coded CredentialsPatch nowKEVEPSS 44.37%Jun 28, 2022
- Unknowncommscope ruckus_vriot Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 11.59%Jun 28, 2022
- UnknownCisco application_extension_platform Stack-based Buffer OverflowPatch nowKEVEPSS 18.50%Jun 22, 2022
- Unknownsoliton filezen Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.54%Jun 22, 2022
- UnknownThunderbird for Windows ms-msdt, search, and search-ms Protocols VulnerabilityPatch nowKEVEPSS 0.80%Jun 15, 2022
- High7.8Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 0.41%Jun 14, 2022
- UnknownWindows Common Log File System Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 0.68%Jun 13, 2022
- Unknownarmemberplugin armember Missing AuthorizationPatch nowKEVEPSS 8.67%Jun 6, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.06%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.31%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Jun 2, 2022
- High7.2car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Jun 2, 2022
- Unknownglpi-project barcode Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 52.66%May 31, 2022
- Unknownmontala resourcespace Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 77.89%May 31, 2022
- UnknownMicrosoft Exchange Server Spoofing VulnerabilityPatch nowKEVEPSS 93.50%May 31, 2022
- UnknownGrafana Labs Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 85.40%May 31, 2022